fix(docpad): prevent socket.io code injection